Hardening Your VPN
Schneier on Security
SEPTEMBER 30, 2021
The NSA and CISA have released a document on how to harden your VPN.
Why Your VPN May Not Be As Secure As It Claims
Krebs on Security
MAY 6, 2024
Virtual private networking (VPN) companies market their services as a way to prevent anyone from snooping on your Internet usage. ” The feature being abused here is known as DHCP option 121 , and it allows a DHCP server to set a route on the VPN user’s system that is more specific than those used by most VPNs. .”
VPN 
324
324 Join 28,000+
Insiders
Sign Up for our Newsletter
This site is protected by reCAPTCHA and the Google Privacy Policy and Terms of Service apply.
U.S. CISA adds Cisco ASA and FTD, and RoundCube Webmail bugs to its Known Exploited Vulnerabilities catalog
Security Affairs
OCTOBER 25, 2024
is a Denial of Service (DoS) issue that impacts the Remote Access VPN (RAVPN) service of ASA and FTD. An attacker could exploit this vulnerability by sending a large number of VPN authentication requests to an affected device. Services that are not related to VPN are not affected.” continues the advisory.
VPN 112
112 
NSA on Securing VPNs
Schneier on Security
JULY 15, 2020
The NSA's Central Security Service -- that's the part that's supposed to work on defense -- has released two documents (a full and an abridged version) on securing virtual private networks. Maintaining a secure VPN tunnel can be complex and requires regular maintenance. patches) for VPN gateways and clients.
VPN 243
243 
Hackers Were Inside Citrix for Five Months
Krebs on Security
FEBRUARY 19, 2020
It is perhaps best known for selling virtual private networking (VPN) software that lets users remotely access networks and computers over an encrypted connection. Iranian hackers recently have been blamed for hacking VPN servers around the world in a bid to plant backdoors in large corporate networks.
VPN 363
363 
FBI, CISA Echo Warnings on ‘Vishing’ Threat
Krebs on Security
AUGUST 21, 2020
The advisory came less than 24 hours after KrebsOnSecurity published an in-depth look at a crime group offering a service that people can hire to steal VPN credentials and other sensitive data from employees working remotely during the Coronavirus pandemic. authenticate the phone call before sensitive information can be discussed.
VPN 363
363 
NSA, CISA release guidance on hardening remote access via VPN solutions
Security Affairs
SEPTEMBER 29, 2021
CISA and the NSA agencies have published guidance for securely using virtual private network (VPN) solutions. Cybersecurity and Infrastructure Security Agency (CISA) and the National Security Agency (NSA) have released guidance for increasing the security of virtual private network (VPN) solutions.
VPN 144
144 
Black Kingdom ransomware operators exploit Pulse VPN flaws
Security Affairs
JUNE 15, 2020
Black Kingdom ransomware operators are targeting organizations using unpatched Pulse Secure VPN software to deploy their malware. the malicious code encrypts files and appends the.DEMON extension to filenames of the encrypted documents. Black Kingdom ransomware was first spotted in late February by security researcher GrujaRS.
VPN 139
139 
Ferocious Kitten APT targets Telegram and Psiphon VPN users in Iran
Security Affairs
JUNE 17, 2021
Iran-linked Ferocious Kitten APT group used instant messaging apps and VPN software like Telegram and Psiphon to deliver Windows RAT and spy on targets’ devices. ” Kaspersky spotted the activity of the group by investigating two weaponized documents that were uploaded to VirusTotal in July 2020 and March 2021. .
VPN 140
140 
GoDaddy Employees Used in Attacks on Multiple Cryptocurrency Services
Krebs on Security
NOVEMBER 21, 2020
In due course, the malicious actor was able to partially compromise our infrastructure, and gain access to document storage.” The phishers often will explain that they’re calling from the employer’s IT department to help troubleshoot issues with the company’s email or virtual private networking (VPN) technology.
Cryptocurrency 363
363 
NSA and CISA Release Security Tips Regarding VPN Security
Heimadal Security
SEPTEMBER 29, 2021
Cybersecurity and Infrastructure Security Agency (CISA) have issued guidance for strengthening the security of virtual private network (VPN) services. The post NSA and CISA Release Security Tips Regarding VPN Security appeared first on Heimdal Security Blog.
VPN 98
98 
Experts warn of mass exploitation of Ivanti Connect Secure VPN flaws
Security Affairs
JANUARY 16, 2024
Experts warn that recently disclosed Ivanti Connect Secure VPN and Policy Secure vulnerabilities are massively exploited in the wild. Through forensic analysis of the memory sample, Volexity was able to recreate two proof-of-concept exploits that allowed full unauthenticated command execution on the ICS VPN appliance.
VPN 127
127 
Treasury Sanctions Creators of 911 S5 Proxy Botnet
Krebs on Security
MAY 28, 2024
911 built its proxy network mainly by offering “free” virtual private networking (VPN) services. 911’s VPN performed largely as advertised for the user — allowing them to surf the web anonymously — but it also quietly turned the user’s computer into a traffic relay for paying 911 S5 customers.
VPN 276
276 
North Korean cyber attacks income and free VPN data breach
CyberSecurity Insiders
JUNE 6, 2023
The nation is known to plant its employees in other countries by fabricating false documents, allowing them to initiate and profit from their malicious digital campaigns. In a separate news development, cybersecurity researcher Jeremiah Fowler recently discovered a significant data breach related to the database of a Free VPN service.
Data breaches 107
107 
Adventures in Contacting the Russian FSB
Krebs on Security
JUNE 7, 2021
In the process of doing so, I encountered a small snag: The FSB’s website said in order to communicate with them securely, I needed to download and install an encryption and virtual private networking (VPN) appliance that is flagged by at least 20 antivirus products as malware. The FSB headquarters at Lubyanka Square, Moscow.
Antivirus 331
331 
IPVanish vs NordVPN: Compare Features and Price
eSecurity Planet
MARCH 12, 2025
IPVanish and NordVPN are VPN solutions that offer customers multiple pricing options, a mobile VPN, and various privacy features. IPVanish is an affordable VPN with multiple support channels, including phone. Ive compared both VPNs, including their plans and features, to help you decide which is better for you.
VPN 59
59 
NSA Attacks Against Virtual Private Networks
Schneier on Security
SEPTEMBER 17, 2018
A 2006 document from the Snowden archives outlines successful NSA operations against "a number of "high potential" virtual private networks, including those of media organization Al Jazeera, the Iraqi military and internet service organizations, and a number of airline reservation systems.".
Media 270
270 
8 security tips for small businesses
Malwarebytes
NOVEMBER 6, 2024
Very important files and documents can be encrypted or stored in password protected folders to keep them safe from prying eyes. Use a firewall and VPN A firewall protects an entry point to a network while a VPN creates an encrypted tunnel between two networks.
“BlueLeaks” Exposes Huge Trove of Law Enforcement Data
Adam Levin
JUNE 24, 2020
Among the hundreds of thousands of documents are police and FBI reports, bulletins, guides and more,” DDoSecrets announced on its Twitter feed (Twitter has since banned the DDoSecrets account). Included in the data set are emails, audio, video, scanned documents, bulletins, guide, and police and FBI reports.
Data collection 189
189 
Amid an Embarrassment of Riches, Ransom Gangs Increasingly Outsource Their Work
Krebs on Security
OCTOBER 8, 2020
If the attachment is opened, the malicious document proceeds to quietly download additional malware and hacking tools to the victim machine ( here’s one video example of a malicious Microsoft Office attachment from the malware sandbox service any.run ). .” ” WHO IS DR. SAMUIL?
Cybercrime 350
350 
110 Nursing Homes Cut Off from Health Records in Ransomware Attack
Krebs on Security
NOVEMBER 22, 2019
The care facilities that VCPI serves access their records and other systems outsourced to VCPI by using a Citrix-based virtual private networking (VPN) platform, and Christianson said restoring customer access to this functionality is the company’s top priority right now. They didn’t even succeed at first, but they kept trying.”
Ransomware 363
363 
3CX Breach Was a Double Supply Chain Compromise
Krebs on Security
APRIL 20, 2023
Mandiant found the earliest evidence of compromise uncovered within 3CX’s network was through the VPN using the employee’s corporate credentials, two days after the employee’s personal computer was compromised. The malware was found inside of a document that offered an employment contract at the multinational bank HSBC.
Malware 328
328 
Privacy Roundup: Week 13 of Year 2025
Security Boulevard
MARCH 31, 2025
Privacy Without Compromise: Proton VPN is Now Built Into Vivaldi Vivaldi Vivaldi integrates ProtonVPN natively into its desktop version of its browser. Proton Drive and Docs now support collaboration with users without Proton accounts Proton Proton users can now collaborate on documents with anyone -- including those without Proton accounts.
VPN 59
59 
NSA, CISA Release Guidance for Choosing and Hardening VPNs
eSecurity Planet
OCTOBER 1, 2021
The National Security Agency (NSA) and the Cybersecurity and Infrastructure Security Agency (CISA) have released guidance and best practices for securing virtual private network (VPN) solutions. What might be most striking about the document is how many security steps and solutions it takes to properly secure VPN connections.
VPN 111
111 
Sophos details five years of China-linked threat actors’ activity targeting network devices worldwide
Security Affairs
NOVEMBER 2, 2024
The first documented attack against a Sophos facility is the one that targeted Cyberoam in 2018. Attackers maintained persistence through VPN credentials, Active Directory DCSYNC access, and firmware-hooking methods to survive updates.
Firmware 120
120 
Over a Dozen Android Apps on Google Play Store Caught Dropping Banking Malware
The Hacker News
JULY 29, 2022
These 17 dropper apps, collectively dubbed DawDropper by Trend Micro, masqueraded as productivity and utility apps such as document scanners, QR code readers, VPN services, and call recorders, among others. All these apps in question have been
Banking 126
126 
Cisco warns of password-spraying attacks targeting Secure Firewall devices
Security Affairs
MARCH 29, 2024
Cisco warns customers of password-spraying attacks that have been targeting Remote Access VPN (RAVPN) services of Cisco Secure Firewall devices. Cisco is warning customers of password-spraying attacks that have been targeting Remote Access VPN (RAVPN) services configured on Cisco Secure Firewall devices. ” reads the report.
Firewall 130
130 
Patchwork APT caught in its own web
Malwarebytes
JANUARY 7, 2022
In order to distribute the RAT onto victims, Patchwork lures them with documents impersonating Pakistani authorities. For example, a document called EOIForm.rtf was uploaded by the threat actor onto their own server at karachidha[.]org/docs/. Figure 4: Malicious document triggers exploit. Figure 10: Threat actor uses VPN-S.
VPN 145
145 
Norton vs McAfee: Compare Antivirus Software 2025
eSecurity Planet
NOVEMBER 12, 2024
Aside from antivirus, Norton offers ransomware and hacking protection, privacy monitoring, and a VPN. Even McAfee’s most basic plan includes a VPN, identity monitoring, and text scam detection. McAfee Essential offers web browsing protection, VPN, and identity monitoring. 5 Pricing: 3.7/5 5 Core features: 3.5/5 5 Pricing: 4.7/5
Antivirus 64
64 
Microsoft issues targeted notification to hospitals vulnerable to Ransomware attacks
Security Affairs
APRIL 2, 2020
Microsoft is sending notifications to dozens of hospitals about vulnerable VPN devices and gateways exposed online in their network. Microsoft is warning dozens of hospitals of the risks of ransomware attacks due to insecure VPN devices and gateways exposed online. ” reads the post published by Microsoft.
Ransomware 140
140 
Daixin Team group claimed the hack of North Texas Municipal Water District
Security Affairs
NOVEMBER 28, 2023
The ransomware gang claims the theft of board meeting minutes, internal project documentation, personnel details, audit reports, and more. The Daixin Team group gains initial access to victims through virtual private network (VPN) servers. The threat actors obtained the VPN credentials through phishing attacks.
Hacking 135
135 
LockBit Ransomware operators hit Swiss helicopter maker Kopter
Security Affairs
DECEMBER 6, 2020
The files published by the ransomware gang on the leak site include internal projects, business documents, and various aerospace and defense industry standards. LockBit ransomware operators told ZDNet that they have accessed the network of the helicopter maker via a VPN appliance that was poorly protected. Source ZDNet.
Ransomware 133
133 
Comparing Top VPN Solutions: SurfShark vs ExpressVPN
eSecurity Planet
SEPTEMBER 26, 2024
Surfshark and ExpressVPN are both popular VPNs for individuals and home office setups. Surfshark is a highly affordable solution with many useful features for basic and advanced VPN needs. 5 SurfShark is a VPN solution offering multiple privacy and security features besides private networking. month • SurfShark One: $3.39/month
VPN 59
59 
National Consumer Protection Week: Keeping your personal data safe in a digitally connected world
Webroot
MARCH 3, 2025
Document disposal Shred sensitive documents. Practice personal Information management Data minimization strategies Provide the least number of private details necessary when filling out forms or answering questionnaires. Social media privacy Avoid sharing personal information on social media.
U.S. CISA: hackers breached a state government organization
Security Affairs
FEBRUARY 16, 2024
The government experts conducted an incident response assessment of the state government organization after its documents were posted on the dark web. CISA and MS-ISAC assessed that the threat actor connected to the VM through the victim’s VPN with the intent to blend in with legitimate traffic to evade detection.”
Government 144
144 
North Korean APT group Kimsuky allegedly hacked South Korea’s atomic research agency KAERI
Security Affairs
JUNE 19, 2021
North Korea-linked APT group Kimsuky allegedly breached South Korea’s atomic research agency KAERI by exploiting a VPN vulnerability. A KAERI spokesperson revealed that threat actors exploited a vulnerability in a virtual private network (VPN) server to gain access to the network of the institute. ” reported The Record.
Hacking 144
144 
How to Use a VPN: Complete User Guide
eSecurity Planet
SEPTEMBER 5, 2024
A VPN (Virtual Private Network) routes your internet traffic through an encrypted tunnel, shielding your data from hackers and ensuring your online activities remain private and secure. A VPN can provide the solution if you want to safeguard your personal information, bypass geo-restrictions, or maintain anonymity online.
VPN 59
59 
Microsoft Defender vs. McAfee: Features, Pricing, Pros & Cons
eSecurity Planet
FEBRUARY 17, 2025
Visit Microsoft Defender Pros & Cons Pros Cons Free Limited advanced features Integration with windows No VPN feature Automatic updates Only supports Windows Key Features Real-time threat protection: Microsoft Defender actively monitors your system for viruses, malware, and other threats. It supports Windows OS only. 5 Pricing: 4.7/5
Antivirus 69
69 
Travel Safe: Cybersecurity Tips for Your Next Vacation
SecureWorld News
NOVEMBER 27, 2024
Back up files If you haven't backed up the data on your devices, like photos, documents or other files, do so before heading on vacation. Instead, use a virtual private network (VPN) or your phone as a personal hotspot to surf more securely. Updates often include tweaks that protect you against the latest cybersecurity concerns.
Cybersecurity 103
103 
Resilience lies with security: Securing remote access for your business
Webroot
OCTOBER 22, 2021
The user can access their company’s files and documents as if they were physically present at their office. The most popular options include virtual private network (VPN) or remote desktop protocol (RDP). VPN works by initiating a secure connection over the internet through data encryption. Document your procedures.
VPN 124
124 
Is your whole digital life protected? 4 ways to address common vulnerabilities
Webroot
FEBRUARY 21, 2025
Its a top-end, true all-in-one offering based on a new platform that combines antivirus, password manager, identity protection, VPN, backup, and parental controls. Shred or securely dispose of documents containing sensitive information and keep important documents in a secure location.
17 Android Apps on Google Play Store, dubbed DawDropper, were serving banking malware
Security Affairs
JULY 31, 2022
The DawDropper apps are masqueraded as productivity and utility apps such as document scanners, VPN services, QR code readers, and call recorders. All these apps in question have been removed from the app marketplace. ” reads the report published by Trend Micro. “It also hosts malicious payloads on GitHub.
Banking 132
132 
Create a Disaster Preparedness Plan to Keep Your Identity Safe
Identity IQ
SEPTEMBER 9, 2024
However, these disasters can make you more vulnerable to identity theft, as critical documents and devices may be lost , stolen, or damaged, and the urgency of the situation often leads to lapses in security. During a disaster, keep documents and devices with you, use secure connections, and monitor your accounts for unusual activity.
Identity Theft 105
105 
The Original APT: Advanced Persistent Teenagers
Krebs on Security
APRIL 6, 2022
“They would just keep jamming a few individuals to get [remote] access, read some onboarding documents, enroll a new 2FA [two-factor authentication method] and exfiltrate code or secrets, like a smash-and-grab,” the CXO said. “These guys were not leet , just damn persistent.” ” HOW DID WE GET HERE?
Let's personalize your content